Security Risk Management – Auditing for Australia
The Australian National Audit Office (ANAO) has undertaken nine previous cross agency protective security audits. The AGD, which is responsible for promulgating Australian Government protective security policy, has indicated its support for the conduct of these audits and acknowledged their contribution to improving the management and delivery of protective security practices in the Australian Government sector.
The current audit continues the ANAO’s series of cross‐agency protective security audits. The objective of this audit was to assess whether selected organisations had effective security risk management programs, including whether a selection of protective security risk treatment controls was working as designed.